Job Details

Director of Information Security and Risk Management

  2025-12-06     Highmark Health     Baton Rouge,LA  
Description:

Company : Highmark Health

Job Description :

JOB SUMMARY

CANDIDATE MUST BE US Citizen (due to contractual/access requirements)

This role is pivotal in guiding and managing Identity and Access Management (IAM) services across the organization. Lead the IAM program by developing and implementing policies, standards, and controls while collaborating with Information Security, IT Infrastructure, Application Development, and business units to ensure secure access to systems and data. Foster talent, effectively manage resources, develop staff capabilities, plan, coordinate work, and oversee performance. Play an active role in IAM strategic planning and develop action steps that align with corporate objectives. Define service levels, monitor compliance, and manage budgets effectively to control expenses.

ESSENTIAL RESPONSIBILITIES

  • Oversee management responsibilities including hiring decisions, coaching, development, and performance management.
  • Organize and direct the daily operations of the department while implementing necessary policies and programs.
  • Maintain effective communication with all organizational levels; facilitate meetings, design presentations, and represent the company in external engagements.
  • Lead the department and champion organizational change while promoting collaborative relationships.
  • Ensure project management oversight for continual improvement of processes by developing solutions with senior executives and adhering to internal standards.
  • Perform other duties as assigned.

EDUCATION

Required

  • Bachelor's Degree in Information Security, Information Systems, Information Assurance, Computer Science or a related field, or relevant experience as determined by the company.

Preferred

  • Master's Degree in Information Security or a related field with a focus on IAM.

EXPERIENCE

Required

  • 10 - 15 years in Information Security and/or Information Risk Management.
  • 10 - 15 years developing and presenting Information Security concepts to diverse audiences.
  • 7 - 10 years providing mentorship in a leadership role.
  • 5 - 7 years of Staff Management experience.
  • 5 - 7 years in developing and executing strategic plans.
  • 5 - 7 years of budget management experience.

Preferred

  • Experience managing an IAM program using standardized frameworks.
  • Familiarity with cloud-based IAM solutions.
  • Experience implementing RBAC, ABAC, and PBAC.
  • Knowledge of Zero Trust security models in relation to IAM.
  • Experience applying AI and ML to IAM.
  • Experience with Identity Governance technologies (e.g., SailPoint).
  • Knowledge of PKI.
  • Experience with Federated Identity Management (SAML, OAuth, OpenID Connect).
  • Familiarity with enterprise directory services like Active Directory and LDAP.
  • Experience securing APIs using IAM principles.
  • Familiarity with major cloud-based identity providers (Azure AD, AWS IAM, Google Cloud Identity).

LICENSES AND CERTIFICATIONS

Required

  • None

Preferred (any of the following)

  • Certified Information Systems Security Professional (CISSP).
  • Certified Information Security Manager (CISM).
  • Certified in Risk and Information Systems Controls (CRISC).
  • Information Technology Infrastructure Library (ITIL).

SKILLS

  • Knowledge of regulatory requirements like HIPAA, HITECH, and PCI DSS.
  • Strong executive communication and presentation skills.
  • Exceptional teamwork and interpersonal skills.
  • Experience leading process improvement initiatives.
  • Able to motivate high-performance teams.
  • Proven competencies in project execution.
  • Effective relationship management abilities.

Language (Other than English): None

Travel Requirement: 0% - 25%

PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS

Position Type

Office-based, with occasional teaching/training responsibilities.

Frequent travel from the office to various work sites is rare; primarily in-office work is required.

Physical work site required: Yes

Lifting: up to 10 pounds - Constantly; 10 to 25 pounds - Occasionally; 25 to 50 pounds - Rarely

Disclaimer: This job description outlines the general responsibilities of the role and may not encompass all duties and qualifications required.

Compliance Requirement: This role adheres to ethical and legal standards set forth by company policies. Employees may access confidential information, necessitating compliance with HIPAA and company privacy policies.

All employees must comply with the company's Code of Business Conduct, including adherence to applicable laws and company policies.

Pay Range Minimum: $126,400.00

Pay Range Maximum: $236,000.00

Base pay is determined by various factors including candidate qualifications, experience, and contributions.

Highmark Health prohibits discrimination against protected veterans and individuals with disabilities as well as discrimination based on any other protected category.

We aim to make this site accessible to all users. For accommodation requests, please contact HR Services Online.

Req ID: J269803


Apply for this Job

Please use the APPLY HERE link below to view additional details and application instructions.

Apply Here

Back to Search